📦 Jtexpress — Jtexpress工具
v1.0.0Use J&T Express (极兔速递) for shipment tracking, shipping guidance, service-type comparison, outlet lookup, and delivery-time or fee estimation. Use when the us...
0· 153·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThis skill is internally consistent with its stated purpose: a local J&T Express helper that stores history/subscriptions in a local SQLite DB and optionally encrypted files under ~/.openclaw/data/jtexpress; it does not request external credentials or obvious network exfiltration in the provided sources.
评估建议
This skill appears to do what it claims: local tracking, estimates, and optional subscription/history persistence. Before installing or running it, note that:
- It will create ~/.openclaw/data/jtexpress and a local SQLite DB and may create an encrypted key and files under ~/.openclaw/data/jtexpress/secure when privacy features are used. These files are stored with restrictive permissions (600) per the code.
- The bundle includes Python code and a requirements.txt (cryptography, aiohttp, qrcode, ...详细分析 ▾
✓ 用途与能力
Name/description (J&T Express helper) match the code and SKILL.md. The code implements tracking, estimates, history, subscriptions, and local persistence under ~/.openclaw/data/jtexpress which is consistent with the stated purpose.
✓ 指令范围
SKILL.md clearly documents workflows and local persistence and instructs the agent to only persist when necessary. The runtime code implements the documented behavior. It does not request unrelated files, env vars, or credentials in the visible code. Note: the package contains runtime Python code (not purely prose instructions), so the agent will run bundled code rather than only following prose.
ℹ 安装机制
There is no install spec (no external downloads) which lowers risk. However, this skill includes code files (jtexpress.py and security.py) and a requirements.txt — the absence of an install block is not harmful but means dependency installation (cryptography, aiohttp, etc.) would be required to run the code. This is a minor inconsistency (described as 'instruction-only' but ships code).
✓ 凭证需求
The skill declares no required environment variables, no credentials, and the code does not access unrelated secrets. It creates local storage and an optional local encryption key file for encrypted persisted data; these are proportionate to the stated storage/privacy features.
✓ 持久化与权限
The skill persists data under its own directory (~/.openclaw/data/jtexpress) and creates an encrypted .key file only in that scope. always is false and it does not request system-wide or cross-skill configuration changes. The local persistence behavior is declared in SKILL.md and implemented in code.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/21
Initial release of J&T Express skill. - Provides shipment tracking, service-type comparison, outlet lookup, and delivery-time or fee estimation for J&T Express. - Supports privacy controls and local data persistence when used with the CLI. - Guides users through shipment tracking, fee/time estimation, and other common tasks. - Includes clear information about data storage and privacy options.
● Pending
安装命令
点击复制官方npx clawhub@latest install jtexpress
镜像加速npx clawhub@latest install jtexpress --registry https://cn.longxiaskill.com镜像同步中
技能文档
Overview
Use this skill to help users with common J&T Express tasks such as tracking shipments, understanding service levels, estimating timing or fees, and preparing to send a parcel.
Local Persistence
When the local CLI/runtime code is used, this skill may create and persist local data under:
~/.openclaw/data/jtexpress/jtexpress.db
~/.openclaw/data/jtexpress/secure/
~/.openclaw/data/jtexpress/secure/.键
600
~/.openclaw/data/jtexpress/privacy_export.json
Only use persistence when it is necessary for the user's requested workflow. If the user asks about privacy, disclose these paths clearly.
Privacy Controls
The local CLI supports privacy operations:
privacy info— show local storage paths 和 stored-file infoprivacy 清除— 清除 local SQLite history/subscription data 和 encrypted local filesprivacy 导出— 导出 local storage metadata 到privacy_export.json
Workflow
- Determine 用户's goal:
- Ask 对于 仅 missing essentials, such 作为 tracking 数字, 路由, 包 size, 或 urgency.
- Give 最多 practical answer 第一个.
- 如果 exact fee 或 timing cannot confirmed, provide cautious estimate 和 state assumptions.
- 如果 task uses local runtime features persist data, mention local history/subscription/privacy files 可能 created 在...下
~/.openclaw/data/jtexpress/. - 做 不 claim 到 complete real shipping actions unless live tools 可用 和 confirmed.